Microsoft Security Operations Engineer

Movate Technologies; Chennai; Presencial; INR 1.200.000 - 2.400.000; Jornada completa

Descripción de la vacante

Movate Technologies in Chennai, India seeks a proactive Microsoft Security Operations Engineer with 3-5 years of cybersecurity operations experience to monitor, detect, investigate, and respond across the Defender/XDR suite.

The role involves incident triage, threat hunting, telemetry analysis, and crafting KQL queries, analytics rules, and playbooks. Strong hands-on experience with Microsoft security technologies is essential.

Formación

• Bachelor's degree in Computer Science, Information Security, Information Technology, or a related discipline.
• 3–5 years of experience in Security Operations, SOC, Incident Response, or Cyber Defense roles.
• Hands-on experience working with Microsoft security technologies in enterprise environments.

Responsabilidades

• Monitor, investigate, and respond to security alerts and incidents using Microsoft Defender XDR, Microsoft Sentinel, and Microsoft Defender for Endpoint.
• Perform incident triage, analysis, containment, and remediation in accordance with established security procedures.
• Conduct threat hunting activities to identify suspicious behaviors and emerging threats.
• Analyze security events, logs, and telemetry data to detect potential security risks.
• Develop, tune, and optimize Microsoft Sentinel analytics rules, workbooks, and KQL queries to improve detection effectiveness and reduce false positives.
• Investigate endpoint, identity, email, and cloud security incidents and recommend appropriate remediation actions.
• Monitor identity-related security events within Microsoft Entra ID and support access-related investigations.
• Collaborate with internal teams and stakeholders during incident response, root cause analysis, and service restoration activities.
• Support vulnerability management activities and assist in tracking remediation efforts.
• Maintain accurate incident documentation, investigation findings, and post-incident reports.
• Contribute to the continuous improvement of security processes, detection use cases, and operational playbooks.
• Stay current with evolving threat landscapes, attack techniques, and Microsoft security capabilities.

Conocimientos

Security Monitoring

Incident Response

Threat Hunting

Log Analysis

Communication

Educación

Bachelor's degree in Computer Science/Information Security/IT

Herramientas

Microsoft Defender XDR

Microsoft Sentinel

Microsoft Defender for Endpoint

Microsoft Defender for Office 365

Microsoft Defender for Identity

Microsoft Entra ID (Azure AD)

Descripción del empleo

JD:

Role Overview

We are seeking a proactive and analytical Microsoft Security Operations Engineer with 3-5 years of experience in cybersecurity operations. The ideal candidate will support security monitoring, threat detection, incident investigation, and response activities across Microsoft's security ecosystem. This role requires hands-on experience with Microsoft security technologies, strong analytical skills, and the ability to effectively manage and respond to security incidents in a fast-paced environment.

Key Responsibilities

• Monitor, investigate, and respond to security alerts and incidents using Microsoft Defender XDR, Microsoft Sentinel, and Microsoft Defender for Endpoint.
• Perform incident triage, analysis, containment, and remediation in accordance with established security procedures.
• Conduct threat hunting activities to identify suspicious behaviors and emerging threats.
• Analyze security events, logs, and telemetry data to detect potential security risks.
• Develop, tune, and optimize Microsoft Sentinel analytics rules, workbooks, and KQL queries to improve detection effectiveness and reduce false positives.
• Investigate endpoint, identity, email, and cloud security incidents and recommend appropriate remediation actions.
• Monitor identity-related security events within Microsoft Entra ID and support access-related investigations.
• Collaborate with internal teams and stakeholders during incident response, root cause analysis, and service restoration activities.
• Support vulnerability management activities and assist in tracking remediation efforts.
• Maintain accurate incident documentation, investigation findings, and post-incident reports.
• Contribute to the continuous improvement of security processes, detection use cases, and operational playbooks.
• Stay current with evolving threat landscapes, attack techniques, and Microsoft security capabilities.

Required Technical Skills

Microsoft Security Technologies

• Microsoft Sentinel
• Microsoft Defender XDR
• Microsoft Defender for Endpoint
• Microsoft Defender for Office 365
• Microsoft Defender for Identity
• Microsoft Entra ID (Azure AD)

Security Operations

• Security Monitoring & Event Analysis
• Incident Response & Investigation
• Threat Hunting
• Log Analysis
• Alert Triage & Escalation Management
• Vulnerability Management

Technical Competencies

• Kusto Query Language (KQL)
• SIEM & XDR Operations
• MITRE ATT&CK Framework
• Windows Security Concepts
• Identity and Access Management
• Network Security Fundamentals

Qualifications

• Bachelor's degree in Computer Science, Information Security, Information Technology, or a related discipline.
• 3-5 years of experience in Security Operations, SOC, Incident Response, or Cyber Defense roles.
• Hands-on experience working with Microsoft security technologies in enterprise environments.
• Strong understanding of threat detection, incident investigation, and response methodologies.
• Experience analyzing security logs, alerts, and endpoint telemetry.

Excellent analytical, troubleshooting, and communication skills.